Количество 12
Количество 12
BDU:2025-06207
Уязвимость конфигурации sanitiseMatchedBytes межсетевого экрана для защиты веб-приложений ModSecurity, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2025-47947
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available.
CVE-2025-47947
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available.
CVE-2025-47947
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available.
CVE-2025-47947
ModSecurity is an open source, cross platform web application firewall ...
RLSA-2025:8844
Important: mod_security security update
RLSA-2025:8837
Important: mod_security security update
ELSA-2025-8844
ELSA-2025-8844: mod_security security update (IMPORTANT)
ELSA-2025-8837
ELSA-2025-8837: mod_security security update (IMPORTANT)
SUSE-SU-2025:02052-1
Security update for apache2-mod_security2
SUSE-SU-2025:02029-1
Security update for apache2-mod_security2
SUSE-SU-2025:02028-1
Security update for apache2-mod_security2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-06207 Уязвимость конфигурации sanitiseMatchedBytes межсетевого экрана для защиты веб-приложений ModSecurity, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available. | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available. | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content type is `application/json`, and there is at least one rule which does a `sanitiseMatchedBytes` action. A patch is available at pull request 3389 and expected to be part of version 2.9.9. No known workarounds are available. | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
| CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall ... | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | RLSA-2025:8844 Important: mod_security security update | 1% Низкий | около 1 года назад | |
| RLSA-2025:8837 Important: mod_security security update | 1% Низкий | 10 месяцев назад | |
| ELSA-2025-8844 ELSA-2025-8844: mod_security security update (IMPORTANT) | 1% Низкий | около 1 года назад | |
| ELSA-2025-8837 ELSA-2025-8837: mod_security security update (IMPORTANT) | 1% Низкий | около 1 года назад | |
 | SUSE-SU-2025:02052-1 Security update for apache2-mod_security2 | около 1 года назад | ||
| SUSE-SU-2025:02029-1 Security update for apache2-mod_security2 | около 1 года назад | ||
| SUSE-SU-2025:02028-1 Security update for apache2-mod_security2 | около 1 года назад |
Уязвимостей на страницу